topic Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains in Threats

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

Kyaw_Myo_Oo — Sat, 03 Aug 2024 08:05:24 GMT

Dear All,

The CERT Coordination Center (CERT/CC) at Carnegie Mellon University has published a vulnerability note describing a pair of vulnerabilities that could be exploited to spoof email addresses. The issue affects multiple Simple Mail Transfer Protocol (SMTP) servers. CERT/CC writes, “An authenticated attacker using network or SMTP authentication can spoof the identity of a shared hosting facility, circumventing any DMARC policy and sender verification provided by a domain name owner.”

https://www.securityweek.com/vulnerabilities-enable-attackers-to-spoof-emails-from-20-million-domains/?is=2e17210a000df3b23714ee0b7fabf90d53a139a7fd871f741a8f77fe7ad94a1a

Re: Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

Edwin_CybSecGuy — Sat, 03 Aug 2024 16:41:09 GMT

GuardIO Labs posted a detailed write-up on "Echospoofing" and a massive spam campaign that abused Proofpoint and M365 SMTP services to spoof DMARC/DKIM/SPF-verified sending domains.

Read the details here:
https://labs.guard.io/echospoofing-a-massive-phishing-campaign-exploiting-proofpoints-email-protection-to-dispatch-3dd6b5417db6

Re: Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

Kyaw_Myo_Oo — Sun, 04 Aug 2024 01:41:28 GMT

Thanks for sharing @Edwin_CybSecGuy